
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft
File: avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json)
Hash identifier: ArI0fikSNcNI1raBn63Htu4Ham8/6zvkt9fHK7X4MNQ=
Subject key identifier: 7F:01:01:20:D6:2F:63:AF:49:07:CD:6B:D7:C1:D0:CC:00:27:5C:9F
Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7
Certificate issuer: /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft
Manifest number: D6
Signing time: Sun 05 Apr 2026 06:06:01 +0000
Manifest this update: Sun 05 Apr 2026 06:06:00 +0000
Manifest next update: Sun 12 Apr 2026 06:06:00 +0000
Files and hashes: 1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: 9e/ajdORnrFTtEMPpWUIy9emzizOsbrBpIR4K1Z7+Po=)
2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: odsbCFeuJ80nCFfGI9MVsgAWl5WgVD/n5XyJo20vHj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl
rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7
Validity
Not Before: Apr 5 06:06:00 2026 GMT
Not After : Apr 12 06:06:00 2026 GMT
Subject: CN=69d1fbc8-a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:02:20:d0:cc:fb:a3:dd:5d:29:7c:c3:90:
0b:28:b2:8d:e5:af:8d:b0:e1:13:b2:91:a8:09:35:
48:13:57:7f:39:3a:ff:3a:b9:ee:d9:35:5b:5f:84:
cf:11:76:fb:e7:e6:ad:c0:ee:1c:57:79:67:a9:92:
5c:89:4a:c1:78:fc:38:e3:29:25:e9:46:f9:a1:54:
fa:da:1c:ce:40:31:3c:4e:1e:fe:16:a8:c7:b1:18:
fa:e2:e2:ac:5f:f5:2b:46:95:b3:6e:5d:19:d0:30:
48:fa:f7:87:74:14:f2:b1:c4:5b:d8:72:20:6b:84:
bc:ba:a5:38:1d:9a:c2:ae:2e:8a:4b:62:fe:f2:d0:
45:50:3d:fc:0f:1e:6b:29:00:fe:25:8c:e7:98:b7:
4b:eb:20:65:b1:c5:d4:7b:da:77:70:69:d9:81:c7:
6a:89:6f:e6:c2:05:e1:46:79:56:fe:ab:83:53:f1:
7c:d1:42:be:c8:9c:dd:d5:23:98:ef:54:10:24:af:
a4:b7:37:7c:e4:c8:4d:4e:74:9a:4a:06:04:05:ad:
15:7c:cb:0a:1a:1d:8b:f4:ef:d2:88:e0:4a:85:41:
27:8b:8e:91:1c:a2:97:a1:81:4f:67:07:e3:58:4f:
35:5c:d9:22:21:ab:d0:9d:7b:05:4c:71:14:15:c0:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:01:20:D6:2F:63:AF:49:07:CD:6B:D7:C1:D0:CC:00:27:5C:9F
X509v3 Authority Key Identifier:
keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:7b:62:f4:b2:13:eb:7d:43:b0:43:59:7c:b9:47:cd:a0:
96:46:dd:26:bc:f0:0e:fa:ef:a5:d8:11:b2:54:6e:20:a4:ff:
18:27:09:e9:92:a9:f3:ac:e8:74:43:db:f2:9e:ce:b2:1d:0b:
61:bf:c4:3e:a5:b2:32:69:65:9e:14:36:26:f7:1e:c1:ba:72:
ff:b8:bf:37:e5:6b:1b:d7:9d:a5:97:3a:27:b6:7f:5b:36:46:
97:c1:40:97:a1:0e:05:7f:fb:c1:9f:13:ef:f3:48:3a:6d:f7:
7c:31:51:26:5d:3f:8e:45:81:dd:a6:16:26:b4:0f:b9:5b:52:
8d:4b:00:c6:eb:7e:6f:4c:ee:73:6a:e4:6e:21:23:5b:87:74:
03:e1:6e:e8:5e:6e:9d:22:7f:ee:12:70:7a:3a:b8:85:02:39:
5a:bc:b3:3f:42:30:3e:ee:d6:a2:0f:33:25:4e:11:f3:28:92:
69:11:1c:f7:a8:b3:6f:d9:31:b2:bb:21:57:d2:bc:d5:89:72:
bb:d4:bc:13:92:c2:db:3f:02:ce:5b:69:a7:0f:71:69:19:df:
be:5c:e8:06:8b:6f:4b:75:dd:98:d9:a1:09:75:70:b2:71:c4:
9d:26:a6:67:2c:50:17:53:46:68:d7:fb:d8:d8:ee:bb:6b:26:
68:04:a1:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdGMzcxMTAvBgNVBAUTKDZBRjE5MTVDODlGNTBDNzJBRDE2RjQxOUNEMzZFRjEy
RjRBREEzQzcwHhcNMjYwNDA1MDYwNjAwWhcNMjYwNDEyMDYwNjAwWjAYMRYwFAYD
VQQDEw02OWQxZmJjOC1hMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIsCINDM+6PdXSl8w5ALKLKN5a+NsOETspGoCTVIE1d/OTr/Ornu2TVbX4TP
EXb75+atwO4cV3lnqZJciUrBePw44ykl6Ub5oVT62hzOQDE8Th7+FqjHsRj64uKs
X/UrRpWzbl0Z0DBI+veHdBTyscRb2HIga4S8uqU4HZrCri6KS2L+8tBFUD38Dx5r
KQD+JYznmLdL6yBlscXUe9p3cGnZgcdqiW/mwgXhRnlW/quDU/F80UK+yJzd1SOY
71QQJK+ktzd85MhNTnSaSgYEBa0VfMsKGh2L9O/SiOBKhUEni46RHKKXoYFPZwfj
WE81XNkiIavQnXsFTHEUFcD2GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8BASDW
L2OvSQfNa9fB0MwAJ1yfMB8GA1UdIwQYMBaAFGrxkVyJ9QxyrRb0Gc027xL0raPH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0YzNy9FNTEyMzdFQUVF
ODMxMUVGQUY1OEI3M0ZDNEY5QUUwMi9hdkdSWEluMURIS3RGdlFaelRidkV2U3Rv
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F2R1JYSW4xREhLdEZ2UVp6VGJ2RXZTdG84Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0YzNy9FNTEyMzdFQUVFODMxMUVGQUY1OEI3M0ZDNEY5QUUwMi9hdkdSWEluMURI
S3RGdlFaelRidkV2U3RvOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIch7YvSyE+t9Q7BDWXy5R82glkbdJrzwDvrvpdgRslRuIKT/GCcJ6ZKp86zo
dEPb8p7Osh0LYb/EPqWyMmllnhQ2Jvcewbpy/7i/N+VrG9edpZc6J7Z/WzZGl8FA
l6EOBX/7wZ8T7/NIOm33fDFRJl0/jkWB3aYWJrQPuVtSjUsAxut+b0zuc2rkbiEj
W4d0A+Fu6F5unSJ/7hJwejq4hQI5WryzP0IwPu7Wog8zJU4R8yiSaREc96izb9kx
srshV9K81Ylyu9S8E5LC2z8Czltppw9xaRnfvlzoBotvS3XdmNmhCXVwsnHEnSam
ZyxQF1NGaNf72Njuu2smaAShRA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:34 2026 by rpki-client